Max-severity GitLab bug allows remote code execution over 12 years of releases

GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on ...
TechTarget

Max-severity GitLab flaw lets attackers run code on servers

GitLab patched a maximum-severity flaw that lets unauthenticated attackers run code on self-managed servers. Experts say: Patch now.

GitLab warns of max severity code execution vulnerability

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that ...
adtmag.com

A Critical GitLab Flaw Turned the Repository API Into a File Reader

GitLab patched a maximum-severity vulnerability that could allow an unauthenticated attacker to read arbitrary files from a self-managed server. CISA added the flaw to its Known Exploited ...
InfoWorld

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s already being probed in the wild. Yet another security vulnerability has ...